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What is claimed is: 



1 LA method of executing a query in a database management system, the method 

2 comprising: 

3 receiving an SQL statement from an application program coupled to the 

4 database management system; 

5 executing the SQL statement; 

6 encrypting the SQL statement to generate an encrypted representation of 

7 the SQL statement; and 

8 logging execution of the SQL statement in a database monitor by storing 

9 the encrypted representation of the SQL statement in an execution log managed by 

10 the database monitor; whereby access to an unencrypted representation of the SQL 

1 1 statement via the database monitor requires decryption of the encrypted 

12 representation of the SQL statement stored in the execution log. 

1 2. The method of claim 1, further comprising encrypting at least one value passed 

2 to one of a host variable and a parameter marker used by the SQL statement, wherein 

3 logging execution of the SQL statement further comprises storing the encrypted value in 

4 the execution log. 
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1 3. A method of logging query execution in a database management system, the 

2 method comprising: 

3 generating an encrypted representation of an execution detail for a query 

4 executed by the database management system; and 

5 logging the execution detail for the query in an execution log for the 

6 database management system by storing the encrypted representation thereof in 

7 the execution log. 

1 4. The method of claim 3, further comprising receiving the query in an 

2 unencrypted form from an application program in communication with the database 

3 management system. 

1 5. The method of claim 4, wherein generating the encrypted representation is 

2 performed after communicating the query to the database management system. 

1 6. The method of claim 3, wherein generating the encrypted representation is 

2 performed prior to communicating the query to the database management system. 

1 7. The method of claim 3, wherein the execution detail comprises a query 

2 statement. 

1 8. The method of claim 3, wherein the execution detail comprises a value passed 

2 to a host variable during execution of the query. 

1 9. The method of claim 3, wherein the execution detail comprises a value passed 

2 to a parameter marker during execution of the query. 

1 10. The method of claim 3, further comprising logging a second execution detail 

2 for the query in the execution log in an unencrypted representation. 



IBM ROC920030213US1 
WH&E BM/262/124 
Patent Application 



- 17- 



1 11. The method of claim 10, wherein the second execution detail includes at least 

2 one of an access plan and a performance statistic associated with execution of the query. 

1 12. The method of claim 3, further comprising decrypting the execution detail in 

2 association with displaying the execution log. 

1 13. The method of claim 12, wherein generating the encrypted representation 

2 includes encrypting the execution detail using a public key, and wherein decrypting the 

3 execution detail includes decrypting the execution detail using a private key paired with 

4 the public key. 

1 14. The method of claim 3, further comprising determining if database 

2 monitoring is enabled in the database management system, wherein generating the 

3 encrypted representation is performed if it is determined that database monitoring is 

4 enabled. 

1 15. The method of claim 3, wherein the query comprises an SQL statement. 
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1 16. An apparatus, comprising: 

2 at least one processor; 

3 a memory within which is stored an execution log; and 

4 program code configured to be executed by the at least one processor to 

5 log query execution in a database management system by generating an encrypted 

6 representation of an execution detail for a query executed by the database 

7 management system, and logging the execution detail for the query in the 

8 execution log by storing the encrypted representation thereof in the execution log. 

1 17. The apparatus of claim 16, wherein the program code is further configured to 

2 receive the query in an unencrypted form from an application program in communication 

3 with the database management system. 

1 18. The apparatus of claim 1 7, wherein the program code is configured to 

2 generate the encrypted representation after communicating the query to the database 

3 management system. 

1 19. The apparatus of claim 16, wherein the program code is configured to 

2 generate the encrypted representation prior to communicating the query to the database 

3 management system. 

1 20. The apparatus of claim 16, wherein the execution detail comprises a query 

2 statement. 

1 21 . The apparatus of claim 16, wherein the execution detail comprises a value 

2 passed to a host variable during execution of the query. 

1 22. The apparatus of claim 16, wherein the execution detail comprises a value 

2 passed to a parameter marker during execution of the query. 
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1 23. The apparatus of claim 16, wherein the program code is further configured to 

2 log a second execution detail for the query in the execution log in an unencrypted 

3 representation. 

1 24. The apparatus of claim 23, wherein the second execution detail includes at 

2 least one of an access plan and a performance statistic associated with execution of the 

3 query. 

1 25. The apparatus of claim 16, wherein the program code is further configured to 

2 decrypt the execution detail in association with displaying the execution log. 

1 26. The apparatus of claim 25, wherein the program code is configured to 

2 generate the encrypted representation by encrypting the execution detail using a public 

3 key, and wherein the program code is configured to decrypt the execution detail by 

4 decrypting the execution detail using a private key paired with the public key. 

1 27. The apparatus of claim 16, wherein the program code is further configured to 

2 determine if database monitoring is enabled in the database management system, and 

3 wherein the program code is configured to generate the encrypted representation if it is 

4 determined that database monitoring is enabled. 

1 28. The apparatus of claim 16, wherein the query comprises an SQL statement. 
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1 29. A program product, comprising: 

2 program code configured to log query execution in a database management 

3 system by generating an encrypted representation of an execution detail for a 

4 query executed by the database management system, and logging the execution 

5 detail for the query in an execution log for the database management system by 

6 storing the encrypted representation thereof in the execution log; and 

7 a computer readable signal bearing medium bearing the program code. 

1 30. The program product of claim 29, wherein the computer readable signal 

2 bearing medium includes at least one of a transmission medium and a recordable 

3 medium. 
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